cve-lite-cli good first issues (TypeScript)

docs(spdx): drop npm-shrinkwrap.json from the SBOM fallback trigger about 1 hour ago

documentation good first issue first-timers-only

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add coverage for phantom-utils (getDeclaredPackages and installCmd) about 2 hours ago

help wanted good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test(usage): pin the three places a truncated usage scan is rendered for a human 1 day ago

help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(cli): advisories sync accepts another flag as the --ca-cert path 1 day ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(sbom): build package URLs per ecosystem instead of always pkg:npm 3 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(python): read and order PEP 440 versions 3 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(cli): an unrecognised --fail-on value is silently accepted and the gate falls back to the default, so a vulnerable tree exits 0 5 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(cli): four more value flags swallow the next flag when given without a value, silently dropping both 5 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: nothing type-checks the test tree, so a green suite proves less than it looks 6 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: fix TypeScript code quality violations from May 2026 audit 6 days ago

enhancement help wanted good first issue refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test(remediation): the registry route has no coverage for an unidentifiable parent 7 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ci: we declare Node >=20 and only ever test Node 24, so the floor we claim is untested 8 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(scan): a scan that finds nothing to parse exits 0, even under --fail-on 10 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor(fail-on): multi-folder section headers still hardcode the gate-class labels 13 days ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(cli): flag-conflict errors print an unrelated corporate SSL proxy hint 13 days ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(json): scan payload records an absolute projectPath, leaking the machine's home directory 13 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(json): scan output omits chainResolution, so it cannot explain a fix command 14 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(debug): make --debug produce one diagnostic bundle that is safe to attach 16 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(ratchet): --ratchet with no committed baseline is a silent permanent pass in CI 18 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(json): record cliVersion, scannedAt and the effective options in the --json payload 20 days ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: replace the em dashes in shipped source and output strings 24 days ago

documentation help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: pin the --fix suppression of the --fail-on gate line 24 days ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: share the --fail-on gate-class labels between the two scan paths 24 days ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(gitignore): .claude/ is not ignored, only a machine-local exclude keeps it out 24 days ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(gitignore): vim and emacs litter beside CLAUDE.md is still committable 25 days ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(report): report.json lost lockfileSource when it was unified with --json 25 days ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(report): HTML fix commands embed a cwd-relative path, so they are not runnable 25 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor(sarif): replace the eight positional parameters with an options object 25 days ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(version): positionAgainstRange throws on a version component above MAX_SAFE_INTEGER 25 days ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test(version): pin the prerelease fix in positionAgainstRange so it cannot silently regress 25 days ago

good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore(cli): use the flag constants in validate.ts instead of string literals 27 days ago

good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore(overrides): three behaviour-neutral tidy-ups in the OA008 detector and version utils 27 days ago

help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(gitignore): local-only maintainer notes are ignored by exact name, so backups are not 28 days ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Bug] OA008 calls every flagged copy "below the floor", including copies above the range about 1 month ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(output): compact mode truncates findings and fix groups without saying so about 1 month ago

bug help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Feature] OA011: override floor exceeds every declaring package's range about 1 month ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Bug] A finding with a confirmed fix is reported as having no safe upgrade, and the package called possibly unmaintained about 1 month ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Bug] An unconfirmed fix version is printed as a copy-run command and stored as validated about 1 month ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Docs] OA010 has no website page, and the rule count still says eleven about 1 month ago

documentation help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Bug] npm advisories without ghsa_id duplicate their OSV counterparts, so CVE counts are inflated about 1 month ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add contextual prioritization signals (usage, reachability hints, exposure) about 1 month ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore(cyclonedx): metadata.tools uses the shape deprecated in 1.6 about 2 months ago

enhancement help wanted hasPR

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(remediation): nearest-published-version path can recommend a pre-release below the fix about 2 months ago

bug help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(cyclonedx): CycloneDX output is pinned to 1.4, three minor versions behind the spec about 2 months ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: pin semver build-metadata handling and exercise the real versionMatchesRange path about 2 months ago

help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add coverage for the config subcommand (show, set, unset) about 2 months ago

help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(action): add sbom input so SPDX output is reachable from the GitHub Action about 2 months ago

enhancement help wanted gh action

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: extend tests/time.test.ts with formatAdvisoryDbFreshness coverage about 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/output/debug.ts about 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: complete the Docusaurus (pnpm monorepo) case study 2 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/advisory.ts 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/sarif.ts 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/output/finding-display.ts 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/version-info.ts 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: incompatible flag errors should explain which option to use, not just state the conflict 2 months ago

enhancement help wanted good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add edge-case coverage to tests/baseline.test.ts 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/file.ts chooseBestLockfile 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract hardcoded 'cve-lite overrides' string to a named constant 2 months ago

good first issue first-timers-only refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/cli/config.ts 2 months ago

good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat(html-report): make package names in dependency path clickable npm links 2 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: document --base, --create-pr, and --debug in the CLI reference 2 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/chalk.ts 2 months ago

good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Docs: Add contributing guide for new developers 2 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: extract the duplicated transitive-risk message in summarizeRisk 2 months ago

good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/array.ts 2 months ago

good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add unit coverage for src/utils/path-coverage.ts 2 months ago

good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

[Bug] Quick take summary has singular verb disagreement ("1 package look" / "1 issue come") 2 months ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: scan-complete line prints "vulnerabilitys" instead of "vulnerabilities" 3 months ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

investigate: PD001/PD002 may over-report phantom deps from example/fixture references 3 months ago

bug help wanted hasPR

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: document the new advisories init command 3 months ago

documentation good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add e2e coverage for the advisories init command 3 months ago

good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: extract cache TTL magic number to named constant 3 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

chore: add pull request template to prompt Closes #NNN 3 months ago

documentation good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: split comparison page into per-tool pages with index 4 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: lean down src/index.ts after extraction PRs land 4 months ago

enhancement good first issue refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: make Docusaurus website mobile-responsive 4 months ago

enhancement good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

feat: verify and fix CVE Lite CLI compatibility with NX workspaces 4 months ago

enhancement help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: mock git subprocess calls in create-pr.test.ts 4 months ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: Refresh NestJS case study with measured remediation structure 4 months ago

documentation help wanted

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix(tests): e2e fixtures fail when new CVEs appear that match clean-project packages 4 months ago

bug good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ux: soften imperative language in fix commands section header 4 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Builder.io lockfile example and verified case study 4 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Mitosis lockfile example and verified case study 4 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Dyad lockfile example and verified case study 4 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add CopilotKit lockfile example and verified case study 4 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Cline lockfile example and verified case study 4 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

perf: reduce scan time for large monorepos 5 months ago

enhancement help wanted performance

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Payload CMS lockfile example and verified case study 5 months ago

documentation enhancement good first issue in progress case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

fix: broken ci-integration link in README should point to workflow-integration 5 months ago

bug documentation good first issue hasPR first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

refactor: split parsers.test.ts into one test file per package manager 5 months ago

enhancement good first issue parser refactor

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Svelte lockfile example and verified case study 5 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Phaser lockfile example and verified case study 5 months ago

documentation good first issue case study

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Presenton lockfile example and verified case study 5 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add Twenty lockfile example and verified case study 5 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add --ca-cert coverage to validate.test.ts 5 months ago

good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

ux: sort case studies index table by lockfile type 5 months ago

documentation good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

Add CamoFox Browser lockfile example and verified case study 5 months ago

documentation good first issue

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

test: add integration tests that scan example fixtures and assert expected output 5 months ago

enhancement help wanted good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

docs: add usage examples to --help output 5 months ago

enhancement good first issue first-timers-only

OWASP/cve-lite-cli

608

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

TypeScript

#appsec#cve#javascript#nodejs#owasp#security#security-tools

OWASP/cve-lite-cli

Open Issues Need Help